#

# CDDL HEADER START

#

# The contents of this file are subject to the terms of the

# Common Development and Distribution License, Version 1.0 only

# (the "License"). You may not use this file except in compliance

# with the License.

#

# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

# or http://www.opensolaris.org/os/licensing.

# See the License for the specific language governing permissions

# and limitations under the License.

#

# When distributing Covered Code, include this CDDL HEADER in each

# file and include the License file at usr/src/OPENSOLARIS.LICENSE.

# If applicable, add the following below this CDDL HEADER, with the

# fields enclosed by brackets "[]" replaced with your own identifying

# information: Portions Copyright [yyyy] [name of copyright owner]

#

# CDDL HEADER END

#

#

# Copyright 2004 Sun Microsystems, Inc. All rights reserved.

# Use is subject to license terms.

#

#pragma ident "%Z%%M% %I% %E% SMI"

Notes Regarding Modification of generic_open.xml

Any changes made to generic_open.xml will need to be considered for

inclusion in generic_limited_net.xml, the "Secure By Default" (see

http://solsec.eng.sun.com/sbd/) profile. The details are discussed

in PSARC/2004/781:

...

The generic_limited_net profile explicitly disables all

smf(5) converted inetd services that are not required to

run the window system, SVM, or vold. It retains ssh and

X remote login as the remote login methods available.

...

In general, _any_ service that allows inbound net access should be

added to generic_limited_net and disabled, unless its activation

has been:approved by SBD.